Cyber criminals have recently adopted ingenious ways to obtain your personal information (e.g. your login details, SMS OTPs, etc.) so that they can take control of your financial accounts and funds - a technique known as phishing. Victims of phishing end up incurring hefty financial losses from unauthorized charges to their e-wallets. However, you can protect yourself from such fraud attempts with simple tips such as the ones below:
1. Avoid sharing sensitive information with others
Please DO NOT share sensitive information associated with your KDX account with anyone. These details include:
2. Look out for phishing attempts
Stay protected by learning the tell-tale signs of a phishing attempt. We’ve put together a few tips to help you get started:
1) What do phishing messages usually look like?
Phishing messages could be in the form of emails, instant messages or even phone calls. On the surface, phishing messages might look legitimate and may ask you to verify an unauthorized transaction, review a payment or perform any other action. However, upon closer inspection, you will notice tell-tale signs that indicate it’s a phishing attempt.
2) How would I know if the message I received is a phishing message?
Please look out for the following to help you identify if the message you received is a phishing attempt.
- Sender’s email address: Check if the sender’s email address looks legitimate, and belongs to the company’s official domain name (e.g. kineticdax.zendesk.com)
- Website domain name: If the email asks you to click on a link, always check if the website you are redirected to belongs to the company’s official domain name
- Content of the email: Remember – KDX will never ask you to share sensitive information (e.g. passwords, bank details) via email
- Spelling errors: Look out for misspelt words
- Inconsistent capitalization: Look out for inconsistencies in capitalization (e.g. using KDX DAX instead Kinetic DAX)
- Irrelevant content: Sometimes, the content of the email might not be directly related to the company’s operations (g. a note about brokerage services in an email sent by KDX, when KDX does not offer any brokerage services)
- Incorrect grammar: Look out for lack of appropriate punctuation or incoherent sentences
3. Act accordingly
If you believe the message you have received is a phishing attempt, remember the following tips:
- You can access your account using the official KDX website at https://kdx.com.my or download the official KDX mobile app from the Google Play Store or Apple App Store for the most convenient access.
- No one should access or share your account apart from you. Set a complex password and never share your login details to anyone. Not even KDX, your family and your close friends.
- DO NOT reveal to others your private key for wallet and secret key for Google Authenticator.
- DO NOT respond, click on any suspicious links, or open the attachments.
- KDX encourages users to enable 2FA (Two-factor authentication) to ensure that your account stays protected. To enable 2FA, please visit our help centre for detailed instructions.
- If you need additional support from KDX, you may contact our support via live chat on https://kdx.com.my/ or via email: support@kineticdax.zendesk.com
- You can also visit our help centre for additional information on how to safeguard yourself and your personal information.